Endpoint Engineer (SCCM / Intune & Vulnerability Management)

GOLDTECH RESOURCES PTE LTD; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

GOLDTECH RESOURCES PTE LTD is seeking an experienced Endpoint Engineer to support and maintain enterprise endpoint environments across Windows and mobile devices. The role focuses on endpoint operations and security, with emphasis on SCCM/MECM and Intune, and collaboration with infrastructure and cybersecurity teams.

The successful candidate will drive patching, vulnerability management, and automation through PowerShell, while ensuring compliant deployment and well-documented processes.

Qualifications

• Diploma or degree in information technology or related discipline.
• 3–5 years of experience in enterprise endpoint management and operations.
• Strong hands-on experience with Microsoft SCCM/MECM and Intune.
• Hands-on experience in endpoint vulnerability management, assessment and remediation.
• Experience managing Windows 10/11 endpoints and mobile devices.
• Strong knowledge of application packaging, software deployment and patch management.
• Experience with Microsoft Entra ID, Active Directory and Group Policy.
• Good documentation and communication skills.
• Able to work effectively with infrastructure, cybersecurity and service support teams.

Responsibilities

• Administer and maintain enterprise endpoint environments using Microsoft SCCM/MECM and Intune.
• Manage Windows endpoints and mobile devices throughout their lifecycle, including provisioning, configuration, deployment, compliance and retirement.
• Package and deploy applications, software updates and operating system updates.
• Monitor endpoint health, device compliance and deployment status.
• Manage Microsoft Office deployment and updates using appropriate deployment tools.
• Support Microsoft Entra ID, Active Directory and Group Policy requirements related to endpoint management.
• Plan and carry out Windows security patches, application updates and third‑party software updates.
• Perform endpoint vulnerability assessments and identify security gaps requiring remediation.
• Coordinate and execute vulnerability remediation activities with infrastructure and cybersecurity teams.
• Track outstanding vulnerabilities and ensure remediation activities are completed within required timelines.
• Support endpoint security and compliance requirements across managed devices.
• Work with vulnerability management tools such as Tenable, where applicable.
• Provide advanced technical support for endpoint, device management and mobility‑related issues.
• Troubleshoot complex endpoint incidents and perform root cause analysis.
• Develop and maintain PowerShell or Batch scripts to automate repetitive administration tasks.
• Support endpoint modernization, technology improvements and service enhancement initiatives.
• Prepare and maintain technical documentation, operating procedures, knowledge articles and service reports.

Skills

Endpoint management

Patching

Automation with PowerShell

Documentation

Troubleshooting

Collaboration across teams

Education

Diploma or Degree in Information Technology / related field

Tools

SCCM/MECM

Intune

Tenable

Active Directory & Group Policy

Job description

Job Overview

We are looking for an experienced Endpoint Engineer to support and maintain enterprise endpoint environments across Windows and mobile devices.

The role focuses on endpoint operations and endpoint security, with strong hands‑on involvement in Microsoft SCCM/MECM and Intune. The successful candidate will also be responsible for supporting vulnerability management and remediation activities to maintain a secure and compliant endpoint environment.

You will work closely with infrastructure, cybersecurity and service support teams to manage endpoint deployment, patching, compliance, security and technical issues.

Key Responsibilities

Endpoint Management & Operations

• Administer and maintain enterprise endpoint environments using Microsoft SCCM/MECM and Intune.
• Manage Windows endpoints and mobile devices throughout their lifecycle, including provisioning, configuration, deployment, compliance and retirement.
• Package and deploy applications, software updates and operating system updates.
• Monitor endpoint health, device compliance and deployment status.
• Manage Microsoft Office deployment and updates using appropriate deployment tools.
• Support Microsoft Entra ID, Active Directory and Group Policy requirements related to endpoint management.

Patch & Vulnerability Management

• Plan and carry out Windows security patches, application updates and third‑party software updates.
• Perform endpoint vulnerability assessments and identify security gaps requiring remediation.
• Coordinate and execute vulnerability remediation activities with infrastructure and cybersecurity teams.
• Track outstanding vulnerabilities and ensure remediation activities are completed within required timelines.
• Support endpoint security and compliance requirements across managed devices.
• Work with vulnerability management tools such as Tenable, where applicable.

Technical Support & Automation

• Provide advanced technical support for endpoint, device management and mobility‑related issues.
• Troubleshoot complex endpoint incidents and perform root cause analysis.
• Develop and maintain PowerShell or Batch scripts to automate repetitive administration tasks.
• Support endpoint modernization, technology improvements and service enhancement initiatives.
• Prepare and maintain technical documentation, operating procedures, knowledge articles and service reports.

Requirements

• Diploma or Degree in Information Technology, Computer Science or a related discipline.
• 3 to 5 years of experience in enterprise endpoint management and operations.
• Strong hands‑on experience with Microsoft SCCM/MECM and Intune is essential.
• Hands‑on experience in endpoint vulnerability management, assessment and remediation is required.
• Experience managing Windows 10/11 endpoints and mobile devices.
• Strong knowledge of application packaging, software deployment and patch management.
• Experience with Microsoft Entra ID, Active Directory and Group Policy.
• Good understanding of endpoint security, device compliance and security patching.
• Familiarity with PowerShell scripting and automation.
• Experience with vulnerability management tools such as Tenable would be an advantage.
• Strong troubleshooting and analytical skills.
• Good documentation and communication skills.
• Able to work effectively with infrastructure, cybersecurity and service support teams.